Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an IIS 7.5 server which, in order to access via Remote Desktop, I have to connect to Cisco VPN

It has several with several sites on it e.g.




I have a multi domain, wildcard SSL certificate which works for * and * which I have 'friendly named' to * and set up the ssl bindings using appcmd (see here - ihave tried both * and explicit IP address)

The https versions of the site can be accessed when I am connected to the VPN, but when I access the sites from any computer that is not connected to the VPN, the https sites time out.

I had thought this was that there was maybe a firewall on 443, but I have checked with the ISP and am told this is not the case (although I would like to check this - whats the best way to confirm?)

When connected to the VPN, pinging the site gives, which is the network adapter, when it's not connected it's 85.blah.blah.blah. The IIS logs record all traffic as coming in on

Any ideas on checking the firewall, or on what else it could be?

share|improve this question
up vote 0 down vote accepted

You're likely dealing with a firewall issue and nothing related to the SSL cert itself. If you want to talk to the server from the Internet you need to validate the path of a https packet through the NAT firewall that the ISP runs and then to your server.

Can you (from a computer outside the firewall and VPN) "telnet 443" and it say connected?

Can your ISP test and validate that Internet packets to 443 on that public IP (85.x.x.x) get to the server?

Can you look at the IIS logs while trying https from Internet and see log entries?

If everything above checks out OK then I would remove the 2nd and 3rd bindings and sites, and just try with one wildcard on one site. That's the simplest config. Then add the 2nd site and test, etc.

share|improve this answer
telnet won't connect to 443, I'll remove all the bindings and pester the ISP. For now, you are the accepted answer! – mcintyre321 Feb 20 '12 at 20:55

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.